last executing test programs: 1.126135043s ago: executing program 4 (id=5973): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0xfffffffd, 0x20006, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) 1.061273404s ago: executing program 4 (id=5978): mlockall(0x3) io_setup(0x202, &(0x7f0000000200)) 712.265963ms ago: executing program 3 (id=5994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0xc11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x1391ccd1beaaa4ae}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 645.948284ms ago: executing program 3 (id=5997): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x104}}}, 0x88) 564.891186ms ago: executing program 3 (id=6002): r0 = socket(0xa, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, &(0x7f0000000240), 0x8) 494.057128ms ago: executing program 3 (id=6005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) 493.818978ms ago: executing program 0 (id=6007): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) clock_adjtime(0x0, &(0x7f0000001000)={0x965b, 0x0, 0x8000000000000001, 0x4, 0x7, 0xfffffffffffffffd, 0x771, 0xffffffffffffffff, 0x4, 0x6, 0x8000000000000001, 0x8000000000000000, 0x3, 0x1020000000000, 0x80000000, 0x51, 0x9, 0x0, 0xffff, 0x40, 0xe6, 0x1000029a1, 0xe, 0x80, 0x9, 0xa}) 490.456988ms ago: executing program 3 (id=6008): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x10001, 0x20, @empty, @empty, 0x8, 0x7, 0xfffffffb, 0x4}}) 481.497728ms ago: executing program 0 (id=6009): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x1) 446.573069ms ago: executing program 3 (id=6011): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 413.54374ms ago: executing program 0 (id=6012): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xf4df, 0x3ff}}) 411.49017ms ago: executing program 0 (id=6014): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) 359.123811ms ago: executing program 0 (id=6017): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xfff3, 0x6}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000c2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f75ffffff0e000000000000000300000007000000030000ca75ffffff"], 0x0, 0x46}, 0x28) 308.604023ms ago: executing program 0 (id=6019): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588"], 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 308.215872ms ago: executing program 1 (id=6020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x1, 0x1}, 0x0, 0x4, 0x0, 0x0, "bd4011c00f05b990"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7c, 0xd, 0x55, 0x3, 0xb, "064be4980b5a0990334fcba6ea28121fd324bfd821482e4a2319008a0efba5da0b54767d74934c81c9f4e5b2afd68bcf0dd8aabf7f7fcc4d3b9cd26a1f71e278f65ccb0e7004ab363ca8eb26a6de4030fc6c21c480807cac84a9f996214b0eeba9ec44115946313593e5ae4ce82afbdd3af3f370389031b60120680cc5143caf335b6f60626bde306f85ad274345dbffa50c6cea346d10bbb3e150aa9133024abbad7b402736a26b5e6f9b51aa43b95abb1d508abe65420693d9ace56dc30b4dad8ca427fec4e0b561b5f9183a674cbdb6a317f019dd466993c6c1f7d91404ccadd48a7885b5c65308d756ceef7dc02d2760fd322291a81401f123e1e7618811", 0x1, "ea7f31dcec874b161cd9c47933d523f24cf15df4"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) 218.120984ms ago: executing program 1 (id=6021): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 218.009834ms ago: executing program 2 (id=6022): keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='d', 0x0) 213.987814ms ago: executing program 1 (id=6023): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) 194.689315ms ago: executing program 2 (id=6024): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x18) 174.487386ms ago: executing program 1 (id=6025): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000010800000004fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="e90402000005000008001b00000000000500100705000000080028002d84bc"], 0x38}, 0x1, 0xffffa888}, 0x20000880) 164.437156ms ago: executing program 4 (id=6026): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204810, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x25a, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) 155.768846ms ago: executing program 2 (id=6027): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000240)=""/168, 0xa8}], 0x2, 0x206, 0x2) 103.217857ms ago: executing program 1 (id=6028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) 102.786507ms ago: executing program 4 (id=6029): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) 94.036977ms ago: executing program 2 (id=6030): setresuid(0xee01, 0xee00, 0x0) setfsuid(0xee01) 54.219058ms ago: executing program 4 (id=6031): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) 48.269658ms ago: executing program 2 (id=6041): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) 44.048869ms ago: executing program 1 (id=6032): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='40', 0x2) 22.530179ms ago: executing program 4 (id=6033): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x2000, 0x0, 0x132, 0x3}) 0s ago: executing program 2 (id=6034): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) kernel console output (not intermixed with test programs): mode [ 124.057996][ T4952] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.064646][ T4952] EXT4-fs error (device loop2): ext4_quota_enable:6451: comm syz.2.2097: inode #3145728: comm syz.2.2097: iget: illegal inode # [ 124.078114][ T4952] EXT4-fs error (device loop2): ext4_quota_enable:6454: comm syz.2.2097: Bad quota inode: 3145728, type: 2 [ 124.082721][ T25] usb 1-1: USB disconnect, device number 48 [ 124.090039][ T4952] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=3145728). Please run e2fsck to fix. [ 124.110806][ T4952] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 124.117525][ T4952] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 124.129661][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.139842][ T310] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.149338][ T310] usb 5-1: config 1 interface 1 has no altsetting 0 [ 124.270174][ T4972] EXT4-fs (loop1): Ignoring removed orlov option [ 124.276980][ T4972] EXT4-fs (loop1): dax option not supported [ 124.309644][ T310] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 124.318715][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.332725][ T310] usb 5-1: Product: syz [ 124.336876][ T310] usb 5-1: Manufacturer: syz [ 124.341495][ T310] usb 5-1: SerialNumber: syz [ 124.441077][ T20] usb 4-1: USB disconnect, device number 44 [ 124.469618][ T293] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 124.573634][ T4989] IPv6: addrconf: prefix option has invalid lifetime [ 124.629600][ T25] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 124.640455][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.657751][ T310] usb 5-1: selecting invalid altsetting 0 [ 124.664301][ T310] usb 5-1: USB disconnect, device number 49 [ 124.836768][ T5017] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 124.869658][ T293] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.881319][ T1274] udevd[1274]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.897181][ T633] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 124.909816][ T293] usb 3-1: not running at top speed; connect to a high speed hub [ 124.946114][ T5028] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 124.953378][ T5028] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 124.963280][ T5028] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 124.973288][ T5028] EXT4-fs (loop3): journal inode is deleted [ 124.989707][ T293] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 125.149644][ T25] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= e.90 [ 125.158684][ T25] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 125.166772][ T25] usb 2-1: Product: syz [ 125.170976][ T25] usb 2-1: Manufacturer: syz [ 125.175552][ T25] usb 2-1: SerialNumber: syz [ 125.220087][ T25] ums-onetouch 2-1:3.0: USB Mass Storage device detected [ 125.239661][ T293] usb 3-1: string descriptor 0 read error: -22 [ 125.245851][ T293] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 125.255854][ T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.263931][ T633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.289717][ T4960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.319628][ T310] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 125.349849][ T633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.369615][ T2214] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 125.423667][ T25] usb 2-1: USB disconnect, device number 45 [ 125.440005][ T633] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.450114][ T633] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 125.459109][ T633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.467574][ T633] usb 1-1: config 0 descriptor?? [ 125.516201][ T5] usb 3-1: USB disconnect, device number 49 [ 125.569600][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 125.713904][ T375] usb 1-1: USB disconnect, device number 49 [ 125.729632][ T2214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.740016][ T2214] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.748919][ T2214] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.749866][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.762031][ T2214] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.778401][ T2214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.820330][ T2214] hub 5-1:1.0: bad descriptor, ignoring hub [ 125.826299][ T2214] hub: probe of 5-1:1.0 failed with error -5 [ 125.832416][ T2214] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 125.859649][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.869859][ T310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 125.879467][ T310] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 125.889276][ T310] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.005123][ T24] audit: type=1326 audit(2000000011.440:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.1.2141" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bfca8e99 code=0x0 [ 126.042180][ T5049] tmpfs: Unknown parameter 'fscontext18446744073709551615' [ 126.070005][ T310] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 126.083586][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.092118][ T310] usb 4-1: Product: syz [ 126.096408][ T310] usb 4-1: Manufacturer: syz [ 126.101608][ T310] usb 4-1: SerialNumber: syz [ 126.112376][ T5058] EXT4-fs (loop1): inodes count not valid: 40 vs 32 [ 126.159687][ T375] usb 5-1: USB disconnect, device number 50 [ 126.237597][ T5066] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 126.331022][ T5089] incfs: Options parsing error. -22 [ 126.427329][ T5089] incfs: mount failed -22 [ 126.500041][ T310] usb 4-1: MIDIStreaming interface descriptor not found [ 126.510730][ T310] usb 4-1: USB disconnect, device number 45 [ 126.523750][ T5105] tmpfs: Bad value for 'uid' [ 126.835189][ T1274] udevd[1274]: inotify_add_watch(7, /dev/loop2p14, 10) failed: No such file or directory [ 126.850289][ T2583] udevd[2583]: inotify_add_watch(7, /dev/loop2p15, 10) failed: No such file or directory [ 126.860868][ T301] udevd[301]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 126.860882][ T341] udevd[341]: inotify_add_watch(7, /dev/loop2p17, 10) failed: No such file or directory [ 126.871597][ T380] udevd[380]: inotify_add_watch(7, /dev/loop2p18, 10) failed: No such file or directory [ 126.890846][ T1275] udevd[1275]: inotify_add_watch(7, /dev/loop2p19, 10) failed: No such file or directory [ 126.890860][ T388] udevd[388]: inotify_add_watch(7, /dev/loop2p20, 10) failed: No such file or directory [ 126.911074][ T1276] udevd[1276]: inotify_add_watch(7, /dev/loop2p21, 10) failed: No such file or directory [ 126.968729][ T15] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 127.045356][ T5148] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 127.072006][ T5148] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.078562][ T5148] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.2191: Block bitmap for bg 0 marked uninitialized [ 127.106214][ T5148] EXT4-fs (loop3): Remounting filesystem read-only [ 127.118232][ T5148] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 127.141281][ T5148] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.2191: Block bitmap for bg 0 marked uninitialized [ 127.174224][ T5148] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 127.207035][ T310] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 127.281579][ T5148] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.2191: Block bitmap for bg 0 marked uninitialized [ 127.295138][ T5148] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 127.304248][ T5148] EXT4-fs (loop3): 1 orphan inode deleted [ 127.309962][ T5148] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime, [ 127.320680][ T5125] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(394240) [ 127.330522][ T5125] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 127.338693][ T5125] F2FS-fs (loop4): Allow to mount readonly mode only [ 127.359436][ T15] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 127.368624][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.378899][ T15] usb 2-1: config 0 descriptor?? [ 127.392881][ T24] audit: type=1400 audit(2000000780.855:207): avc: denied { read } for pid=5166 comm="syz.0.2198" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.416415][ T24] audit: type=1400 audit(2000000780.855:208): avc: denied { open } for pid=5166 comm="syz.0.2198" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 127.416637][ T15] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 127.447572][ T15] usb 2-1: Detected FT-X [ 127.492435][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 127.493078][ T5173] incfs: Options parsing error. -22 [ 127.539430][ T5173] incfs: mount failed -22 [ 127.563615][ T1272] print_req_error: 78 callbacks suppressed [ 127.563629][ T1272] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.586652][ T5179] cgroup2: Unknown parameter 'defcontextL' [ 127.588829][ T341] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.616237][ T15] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 127.623085][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.633353][ T1272] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.633361][ T1272] buffer_io_error: 34 callbacks suppressed [ 127.633370][ T1272] Buffer I/O error on dev loop3p2, logical block 1008, async page read [ 127.659221][ T341] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.666495][ T15] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 127.691671][ T341] Buffer I/O error on dev loop3p4, logical block 880, async page read [ 127.711837][ T15] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 127.724331][ T15] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 127.725143][ T2583] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.733796][ T1274] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.744591][ T2583] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.771491][ T2583] Buffer I/O error on dev loop3p4, logical block 880, async page read [ 127.776680][ T310] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 146, using maximum allowed: 30 [ 127.783148][ T1274] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.793930][ T15] usb 2-1: USB disconnect, device number 46 [ 127.802249][ T1274] Buffer I/O error on dev loop3p2, logical block 1008, async page read [ 127.835758][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 127.850041][ T1274] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.853638][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 127.864236][ T2583] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.872170][ T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 127.893335][ T1274] Buffer I/O error on dev loop3p2, logical block 1008, async page read [ 127.894250][ T15] ftdi_sio 2-1:0.0: device disconnected [ 127.911767][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.916854][ T2583] Buffer I/O error on dev loop3p4, logical block 880, async page read [ 127.920534][ T310] usb 3-1: config 0 descriptor?? [ 127.946988][ T2583] Buffer I/O error on dev loop3p2, logical block 1008, async page read [ 127.947320][ T301] Buffer I/O error on dev loop3p4, logical block 880, async page read [ 127.969041][ T310] usb 3-1: bad CDC descriptors [ 127.975575][ T341] Buffer I/O error on dev loop3p4, logical block 880, async page read [ 127.977570][ T2583] Buffer I/O error on dev loop3p2, logical block 1008, async page read [ 128.188178][ T5] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 128.201049][ T25] usb 3-1: USB disconnect, device number 50 [ 128.207154][ T375] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 128.235541][ T2214] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 128.271172][ T24] audit: type=1326 audit(2000000781.779:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5214 comm="syz.1.2222" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55bfca8e99 code=0x0 [ 128.416312][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 128.435550][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 128.474791][ T5226] erofs: (device loop1): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 128.530910][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.549646][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.558647][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.568793][ T375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.588590][ T5229] loop1: p3 p4 < > [ 128.592712][ T5229] loop1: p3 start 100859904 is beyond EOD, truncated [ 128.644908][ T2214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.672200][ T5234] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 128.685614][ T5236] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 128.721267][ T375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.730388][ T5] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 128.745643][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.753748][ T24] audit: type=1400 audit(2000000782.273:210): avc: denied { create } for pid=5247 comm="syz.1.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.773660][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.781694][ T5] usb 4-1: Product: syz [ 128.785824][ T5] usb 4-1: Manufacturer: syz [ 128.790446][ T375] usb 5-1: Product: syz [ 128.794596][ T375] usb 5-1: Manufacturer: syz [ 128.799344][ T5] usb 4-1: SerialNumber: syz [ 128.804141][ T375] usb 5-1: SerialNumber: syz [ 128.835346][ T2214] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 128.844429][ T2214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.852483][ T2214] usb 1-1: Product: syz [ 128.856698][ T2214] usb 1-1: Manufacturer: syz [ 128.861288][ T2214] usb 1-1: SerialNumber: syz [ 128.866393][ T2214] usb 1-1: config 0 descriptor?? [ 128.902341][ T2214] CoreChips: probe of 1-1:0.0 failed with error -22 [ 129.007081][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 129.014685][ T633] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 129.096818][ T15] usb 1-1: USB disconnect, device number 50 [ 129.102810][ T375] usb 5-1: 0:2 : does not exist [ 129.109905][ T375] usb 5-1: USB disconnect, device number 51 [ 129.178331][ T5] usb 4-1: unit 0 not found! [ 129.188915][ T5] usb 4-1: USB disconnect, device number 46 [ 129.254495][ T633] usb 2-1: Using ep0 maxpacket: 8 [ 129.350024][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.360144][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.369034][ T633] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.379124][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.392949][ T633] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 129.401958][ T633] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 129.550097][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.559292][ T633] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 129.568355][ T633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.576903][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.589183][ T633] usb 2-1: Product: syz [ 129.593356][ T633] usb 2-1: Manufacturer: syz [ 129.599141][ T25] usb 3-1: Product: syz [ 129.603295][ T25] usb 3-1: Manufacturer: syz [ 129.611956][ T25] usb 3-1: SerialNumber: syz [ 129.616754][ T633] usb 2-1: SerialNumber: syz [ 129.643336][ T24] audit: type=1400 audit(2000000783.218:211): avc: denied { create } for pid=5273 comm="syz.4.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.663172][ T25] cdc_mbim 3-1:1.0: bind() failure [ 129.670468][ T5276] fuse: Unknown parameter '0xffffffffffffffff' [ 129.713700][ T24] audit: type=1326 audit(2000000783.291:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5287 comm="syz.4.2257" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x0 [ 129.807158][ T293] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 129.858138][ T5] usb 3-1: USB disconnect, device number 51 [ 129.959264][ T25] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 129.988136][ T633] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 129.995934][ T633] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 130.004502][ T633] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 130.026234][ T633] usb 2-1: 0:2 : does not exist [ 130.032723][ T633] usb 2-1: USB disconnect, device number 47 [ 130.035647][ T375] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 130.159502][ T293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.169636][ T293] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.226804][ T1274] udevd[1274]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.242651][ T293] usb 4-1: string descriptor 0 read error: -71 [ 130.248976][ T293] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 130.258058][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.283049][ T293] usb 4-1: can't set config #1, error -71 [ 130.291740][ T293] usb 4-1: USB disconnect, device number 47 [ 130.340568][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 130.406896][ T375] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 130.417823][ T375] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 130.435374][ T25] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 130.445577][ T25] usb 1-1: config 14 has 0 interfaces, different from the descriptor's value: 1 [ 130.578356][ T375] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 130.587454][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.595493][ T375] usb 5-1: Product: syz [ 130.599707][ T375] usb 5-1: Manufacturer: syz [ 130.604278][ T375] usb 5-1: SerialNumber: syz [ 130.608898][ T15] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 130.616725][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c1.97 [ 130.625902][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.626322][ T5] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 130.634094][ T25] usb 1-1: Product: ᠁ [ 130.645519][ T25] usb 1-1: Manufacturer: 《 [ 130.650113][ T25] usb 1-1: SerialNumber: syz [ 130.825934][ T24] audit: type=1326 audit(2000000784.457:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5327 comm="syz.3.2277" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f177e33ce99 code=0x0 [ 130.902264][ T375] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 130.921279][ T375] snd-usb-audio: probe of 5-1:1.1 failed with error -2 [ 130.924490][ T25] usb 1-1: USB disconnect, device number 51 [ 130.940303][ T375] snd-usb-audio: probe of 5-1:1.2 failed with error -2 [ 130.950151][ T5334] loop3: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 130.952234][ T375] usb 5-1: USB disconnect, device number 52 [ 131.045089][ T15] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 131.056189][ T5] usb 3-1: config 3 has an invalid interface number: 141 but max is 0 [ 131.064527][ T5] usb 3-1: config 3 has no interface number 0 [ 131.070615][ T5] usb 3-1: config 3 interface 141 altsetting 4 endpoint 0x9 is Bulk; changing to Interrupt [ 131.080829][ T5] usb 3-1: config 3 interface 141 has no altsetting 0 [ 131.226330][ T15] usb 2-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40 [ 131.235373][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.243476][ T15] usb 2-1: Product: syz [ 131.248646][ T15] usb 2-1: Manufacturer: syz [ 131.253246][ T15] usb 2-1: SerialNumber: syz [ 131.262151][ T1274] udevd[1274]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 131.263857][ T301] udevd[301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 131.272864][ T341] udevd[341]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 131.282500][ T308] udevd[308]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 131.292294][ T380] udevd[380]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 131.311628][ T1273] udevd[1273]: inotify_add_watch(7, /dev/loop3p13, 10) failed: No such file or directory [ 131.312495][ T388] udevd[388]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 131.322367][ T1275] udevd[1275]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 131.332064][ T1276] udevd[1276]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 131.370068][ T5] usb 3-1: string descriptor 0 read error: -22 [ 131.378602][ T5] usb 3-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=5c.73 [ 131.391178][ T5337] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 131.400770][ T5337] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 131.419406][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.426660][ T5337] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2281: Failed to acquire dquot type 0 [ 131.439105][ T5337] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 131.457030][ T5337] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 131.512724][ T5337] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2281: Failed to acquire dquot type 0 [ 131.543663][ T5337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2281: bg 0: block 64: padding at end of block bitmap is not set [ 131.559950][ T5296] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 131.561771][ T5337] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 131.580096][ T5] asix: probe of 3-1:3.141 failed with error -22 [ 131.597394][ T5337] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 131.614958][ T5337] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2281: Failed to acquire dquot type 0 [ 131.631250][ T15] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 131.660498][ T15] usb 2-1: USB disconnect, device number 48 [ 131.669650][ T5337] EXT4-fs (loop3): 1 orphan inode deleted [ 131.676813][ T5337] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue [ 131.691806][ T5337] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.809915][ T5] usb 3-1: USB disconnect, device number 52 [ 131.824412][ T5364] IPv6: addrconf: prefix option has invalid lifetime [ 131.885169][ T5370] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.906592][ T5368] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 131.914853][ T5370] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.921716][ T5370] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 131.930215][ T5368] EXT4-fs (loop4): cluster size (1024) smaller than block size (4096) [ 131.938549][ T5370] EXT4-fs (loop3): Remounting filesystem read-only [ 131.945368][ T5370] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 131.953292][ T5370] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 131.961700][ T5370] EXT4-fs error (device loop3): ext4_evict_inode:333: inode #15: comm syz.3.2296: mark_inode_dirty error [ 131.973307][ T5370] EXT4-fs (loop3): 1 orphan inode deleted [ 131.979091][ T5370] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,noload,inlinecrypt,errors=remount-ro,norecovery,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold, [ 132.292596][ T5] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 132.340667][ T25] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 132.435456][ T293] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 132.521646][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 132.562012][ T5411] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.573004][ T5411] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.582963][ T5411] JBD2: no valid journal superblock found [ 132.588787][ T5411] EXT4-fs (loop0): error loading journal [ 132.607354][ T15] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 132.635535][ T5] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 132.643734][ T5] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 132.654039][ T5] usb 5-1: config 32 has no interface number 0 [ 132.660237][ T5] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 132.669308][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.702697][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.713029][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.864361][ T293] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.883205][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 132.892255][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.900246][ T25] usb 4-1: Product: syz [ 132.904503][ T25] usb 4-1: Manufacturer: syz [ 132.909076][ T25] usb 4-1: SerialNumber: syz [ 132.940520][ T5] usb 5-1: string descriptor 0 read error: -71 [ 132.946729][ T5] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 132.950020][ T293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.953875][ T15] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.964074][ T293] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.974424][ T5] uvcvideo: No valid video chain found. [ 132.989317][ T15] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.998279][ T5] usb 5-1: USB disconnect, device number 53 [ 133.026239][ T20] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 133.150249][ T15] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 133.159327][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.159629][ T293] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 133.167325][ T15] usb 3-1: Product: syz [ 133.176436][ T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.180673][ T15] usb 3-1: Manufacturer: syz [ 133.189489][ T293] usb 2-1: Product: syz [ 133.193350][ T15] usb 3-1: SerialNumber: syz [ 133.197296][ T293] usb 2-1: Manufacturer: syz [ 133.206451][ T293] usb 2-1: SerialNumber: syz [ 133.273775][ T25] usb 4-1: 0:1 : does not exist [ 133.292697][ T25] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 133.299900][ T25] usb 4-1: unit 80 not found! [ 133.306127][ T25] usb 4-1: USB disconnect, device number 48 [ 133.416732][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.454582][ T20] usb 1-1: not running at top speed; connect to a high speed hub [ 133.526648][ T5430] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 133.531053][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.534368][ T5430] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.546069][ T20] usb 1-1: config 1 interface 0 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.552719][ T15] usb 3-1: 0:1 : does not exist [ 133.565985][ T20] usb 1-1: config 1 interface 0 has no altsetting 0 [ 133.573022][ T5430] F2FS-fs (loop4): Should set mode=lfs with 8KB-sized IO [ 133.584392][ T15] usb 3-1: unit 9 not found! [ 133.589037][ T15] usb 3-1: unit 0 not found! [ 133.594354][ T293] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 133.598704][ T15] usb 3-1: USB disconnect, device number 53 [ 133.603997][ T293] usb 2-1: USB disconnect, device number 49 [ 133.721457][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.733706][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.741930][ T20] usb 1-1: Product: syz [ 133.746086][ T20] usb 1-1: Manufacturer: syz [ 133.751070][ T20] usb 1-1: SerialNumber: syz [ 133.933021][ T5433] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 133.940777][ T5433] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 133.948380][ T5433] F2FS-fs (loop3): QUOTA feature is enabled, so ignore jquota_fmt [ 133.957002][ T5433] F2FS-fs (loop3): invalid crc value [ 133.959828][ T5438] exfat: Deprecated parameter 'utf8' [ 133.963158][ T5433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.967642][ T5438] exfat: Deprecated parameter 'codepage' [ 133.973868][ T633] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 133.979899][ T5438] exfat: Bad value for 'uid' [ 134.004031][ T5433] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 134.013122][ T5433] F2FS-fs (loop3): Failed to read root inode [ 134.064813][ T20] usb 1-1: bad CDC descriptors [ 134.073176][ T20] usb 1-1: USB disconnect, device number 52 [ 134.156013][ T5442] erofs: (device loop1): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block) [ 134.322169][ T5450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 134.330214][ T5450] System zones: 0-2, 18-18, 34-34 [ 134.336022][ T5450] EXT4-fs (loop3): 1 orphan inode deleted [ 134.342636][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue [ 134.356294][ T5450] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.358498][ T5454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 134.378590][ T633] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.464612][ T633] usb 5-1: config 254 has an invalid interface number: 217 but max is 0 [ 134.473118][ T633] usb 5-1: config 254 has no interface number 0 [ 134.479568][ T633] usb 5-1: config 254 interface 217 has no altsetting 0 [ 134.491184][ T5464] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.540562][ T633] usb 5-1: language id specifier not provided by device, defaulting to English [ 134.544632][ T5473] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 134.559820][ T20] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 134.600920][ T5477] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 134.673930][ T633] usb 5-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 1.00 [ 134.683090][ T633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.691246][ T633] usb 5-1: Product: syz [ 134.695670][ T633] usb 5-1: SerialNumber: syz [ 134.728154][ T5481] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 134.759842][ T5485] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 134.788111][ T5] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 134.807052][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 134.908329][ T5488] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 134.931430][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.941841][ T20] usb 3-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 134.953244][ T20] usb 3-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.967548][ T20] usb 3-1: config 1 interface 2 has no altsetting 0 [ 134.988687][ T633] usb-storage 5-1:254.217: USB Mass Storage device detected [ 134.999665][ T633] usb-storage 5-1:254.217: Quirks match for vid 071b pid 3203: 400 [ 135.029451][ T633] usb 5-1: USB disconnect, device number 54 [ 135.121712][ T20] usb 3-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 135.130824][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.130926][ T5] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 135.138823][ T20] usb 3-1: Product: syz [ 135.153608][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.155773][ T20] usb 3-1: Manufacturer: syz [ 135.165499][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.170220][ T20] usb 3-1: SerialNumber: syz [ 135.182956][ T5] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 135.196615][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.205119][ T5] usb 2-1: config 0 descriptor?? [ 135.216908][ T375] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 135.245603][ T5] usb-storage 2-1:0.0: USB Mass Storage device detected [ 135.254063][ T5] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 135.262022][ T15] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 135.466094][ T25] usb 2-1: USB disconnect, device number 50 [ 135.521508][ T20] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 135.545009][ T20] usb 3-1: unit 4 not found! [ 135.549627][ T20] usb 3-1: unit 144 not found! [ 135.598971][ T20] usb 3-1: USB disconnect, device number 54 [ 135.655203][ T15] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.693076][ T15] usb 4-1: not running at top speed; connect to a high speed hub [ 135.731067][ T375] usb 1-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 135.740194][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.748240][ T375] usb 1-1: Product: syz [ 135.752502][ T375] usb 1-1: Manufacturer: syz [ 135.757088][ T375] usb 1-1: SerialNumber: syz [ 135.762537][ T375] usb 1-1: config 0 descriptor?? [ 135.769426][ T15] usb 4-1: config 74 has an invalid interface number: 65 but max is 0 [ 135.777569][ T15] usb 4-1: config 74 has no interface number 0 [ 135.783818][ T15] usb 4-1: config 74 interface 65 has no altsetting 0 [ 135.798255][ T375] hub 1-1:0.0: bad descriptor, ignoring hub [ 135.804157][ T375] hub: probe of 1-1:0.0 failed with error -5 [ 135.807646][ T1274] udevd[1274]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.810472][ T375] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 135.833406][ T15] usb 4-1: language id specifier not provided by device, defaulting to English [ 135.845322][ T375] usb 1-1: Detected SIO [ 135.849917][ T375] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 135.905119][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue [ 135.917856][ T5524] SELinux: security_context_str_to_sid(root) failed for (dev loop4, type ext4) errno=-22 [ 135.959689][ T15] usb 4-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=6b.0d [ 135.968821][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.976886][ T15] usb 4-1: Product: syz [ 135.981045][ T15] usb 4-1: Manufacturer: 熅䄠摘뱋蔥ី嗘ஃ⯡▄꺝墹欰ዖ䴛⚆᝽⨌酕ﾴᗍ䯽渡ѷ⌃兕聆繼铁沿ⵤㄭȠ杤䶷ꭼ㦕睰６뷆駆ᒜ쿑紬 [ 135.998013][ T15] usb 4-1: SerialNumber: syz [ 136.084397][ T5536] erofs: (device loop2): mounted with root inode @ nid 36. [ 136.098934][ T5530] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 136.141088][ T25] usb 1-1: USB disconnect, device number 53 [ 136.158315][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 136.168916][ T25] ftdi_sio 1-1:0.0: device disconnected [ 136.340579][ T15] uvcvideo: Found UVC 0.00 device syz (046d:089b) [ 136.346993][ T15] uvcvideo: No valid video chain found. [ 136.353627][ T15] usb 4-1: USB disconnect, device number 49 [ 136.365012][ T5534] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.397951][ T5534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.502790][ T293] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 136.515299][ T25] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 136.759574][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 136.836047][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 136.912258][ T293] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.919990][ T25] usb 2-1: config 2 has an invalid interface number: 58 but max is 0 [ 136.928097][ T25] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 136.938300][ T25] usb 2-1: config 2 has no interface number 0 [ 136.946900][ T25] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 136.959624][ T293] usb 3-1: not running at top speed; connect to a high speed hub [ 136.973555][ T25] usb 2-1: config 2 interface 58 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 136.983841][ T25] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 136.994933][ T25] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0xE has invalid wMaxPacketSize 0 [ 136.997985][ T375] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 137.004845][ T25] usb 2-1: config 2 interface 58 altsetting 129 has an invalid endpoint with address 0x80, skipping [ 137.023323][ T25] usb 2-1: config 2 interface 58 altsetting 129 endpoint 0xB has invalid maxpacket 72, setting to 64 [ 137.034224][ T20] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 137.041839][ T25] usb 2-1: config 2 interface 58 has no altsetting 0 [ 137.055108][ T293] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 137.198255][ T25] usb 2-1: New USB device found, idVendor=08e9, idProduct=0100, bcdDevice=74.53 [ 137.207479][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.215447][ T25] usb 2-1: Product: syz [ 137.219758][ T293] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 137.228829][ T25] usb 2-1: Manufacturer: syz [ 137.233537][ T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.241543][ T25] usb 2-1: SerialNumber: syz [ 137.245706][ T375] usb 4-1: Using ep0 maxpacket: 16 [ 137.246748][ T293] usb 3-1: Product: syz [ 137.256115][ T293] usb 3-1: Manufacturer: syz [ 137.260707][ T293] usb 3-1: SerialNumber: syz [ 137.274321][ T5542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.379060][ T375] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 137.387234][ T375] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.397524][ T375] usb 4-1: config 0 has no interface number 0 [ 137.426478][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.464436][ T20] usb 5-1: not running at top speed; connect to a high speed hub [ 137.559944][ T375] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 137.562056][ T25] usb 2-1: USB disconnect, device number 51 [ 137.578561][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.578826][ T20] usb 5-1: language id specifier not provided by device, defaulting to English [ 137.607718][ T293] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.608758][ T375] usb 4-1: Product: syz [ 137.622255][ T375] usb 4-1: Manufacturer: syz [ 137.626393][ T293] usb 3-1: unit 48 not found! [ 137.627164][ T375] usb 4-1: SerialNumber: syz [ 137.635189][ T293] usb 3-1: USB disconnect, device number 55 [ 137.649411][ T375] usb 4-1: config 0 descriptor?? [ 137.693515][ T375] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 137.699957][ T375] uvcvideo: No valid video chain found. [ 137.846408][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.893432][ T20] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 137.912407][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.915529][ T375] usb 4-1: USB disconnect, device number 50 [ 137.927795][ T20] usb 5-1: Product: ᠊ [ 137.932000][ T20] usb 5-1: Manufacturer: 䳍槟읇ꕦ맞헇텁턖遧ￃㄞǘ澔㪍ང홂渂糘哪緿 [ 138.283866][ T20] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 138.293039][ T25] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 138.331188][ T20] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 138.350613][ T20] usb 5-1: USB disconnect, device number 55 [ 138.440580][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 138.440592][ T24] audit: type=1400 audit(2000000792.457:214): avc: denied { read } for pid=5581 comm="syz.3.2376" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.441440][ T5582] binder: 5581:5582 ioctl c0306201 200000000040 returned -22 [ 138.455133][ T24] audit: type=1400 audit(2000000792.457:215): avc: denied { open } for pid=5581 comm="syz.3.2376" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.548479][ T24] audit: type=1400 audit(2000000792.457:216): avc: denied { ioctl } for pid=5581 comm="syz.3.2376" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.595481][ T5578] F2FS-fs (loop2): invalid crc value [ 138.608340][ T5578] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 138.628588][ T5578] F2FS-fs (loop2): recover fsync data on readonly fs [ 138.639289][ T5578] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 138.645430][ T25] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.655306][ T25] usb 2-1: config 179 has no interface number 0 [ 138.661562][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 138.671686][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 138.681799][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 138.693140][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 138.734415][ T25] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 138.736025][ T5596] netlink: 'syz.4.2384': attribute type 3 has an invalid length. [ 138.747836][ T25] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.765124][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.785711][ T24] audit: type=1400 audit(2000000792.814:217): avc: denied { setopt } for pid=5597 comm="syz.4.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.805369][ T5580] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.817914][ T25] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 138.836273][ T25] xpad: probe of 2-1:179.65 failed with error -5 [ 139.049251][ T25] usb 2-1: USB disconnect, device number 52 [ 139.070121][ T24] audit: type=1400 audit(2000000793.119:218): avc: denied { nlmsg_write } for pid=5617 comm="syz.4.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 139.158588][ T24] audit: type=1400 audit(2000000793.203:219): avc: denied { bind } for pid=5631 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 139.242524][ T5648] netlink: 'syz.4.2407': attribute type 15 has an invalid length. [ 139.251332][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2407'. [ 139.288871][ T24] audit: type=1400 audit(2000000793.339:220): avc: denied { setopt } for pid=5657 comm="syz.2.2412" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 139.350373][ T24] audit: type=1400 audit(2000000793.402:221): avc: denied { write } for pid=5667 comm="syz.2.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.479036][ T24] audit: type=1400 audit(2000000793.539:222): avc: denied { getopt } for pid=5692 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.581183][ T24] audit: type=1400 audit(2000000793.654:223): avc: denied { getopt } for pid=5708 comm="syz.2.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.740505][ T5733] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 139.886929][ T5766] device sit0 entered promiscuous mode [ 139.903530][ T5766] netlink: 'syz.4.2465': attribute type 1 has an invalid length. [ 139.911844][ T5766] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2465'. [ 139.914234][ T5773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2468'. [ 139.988642][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 140.006504][ T5793] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2477'. [ 140.015893][ T5793] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2477'. [ 140.040511][ T5799] netlink: 'syz.0.2480': attribute type 4 has an invalid length. [ 140.060847][ T5799] netlink: 'syz.0.2480': attribute type 5 has an invalid length. [ 140.069618][ T5799] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2480'. [ 140.160288][ T5835] : renamed from team_slave_1 [ 140.224301][ T5849] device gretap1 entered promiscuous mode [ 140.286285][ T5855] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 140.413098][ T5877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2518'. [ 140.422320][ T375] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 140.589879][ T5920] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.601341][ T5920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.608579][ T5920] IPv6: NLM_F_CREATE should be set when creating new route [ 140.664987][ T375] usb 4-1: Using ep0 maxpacket: 16 [ 140.701285][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 140.701841][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 140.826570][ T375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.921867][ T375] usb 4-1: config 3 has an invalid interface number: 215 but max is 0 [ 140.941112][ T375] usb 4-1: config 3 has no interface number 0 [ 140.949472][ T375] usb 4-1: config 3 interface 215 altsetting 9 endpoint 0x7 has an invalid bInterval 98, changing to 7 [ 140.984952][ T375] usb 4-1: config 3 interface 215 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 141.022224][ T375] usb 4-1: config 3 interface 215 has no altsetting 0 [ 141.188540][ T375] usb 4-1: New USB device found, idVendor=6933, idProduct=5001, bcdDevice=50.d6 [ 141.205026][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.236470][ T375] usb 4-1: Product: syz [ 141.240648][ T375] usb 4-1: Manufacturer: syz [ 141.251631][ T375] usb 4-1: SerialNumber: syz [ 141.293948][ T6084] binder: 6083:6084 ioctl 40046210 0 returned -14 [ 141.320875][ T6089] netlink: 'syz.2.2618': attribute type 17 has an invalid length. [ 141.330180][ T6089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.378385][ T6090] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue [ 141.398412][ T6090] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.569946][ T375] usbhid 4-1:3.215: couldn't find an input interrupt endpoint [ 141.589746][ T375] usb 4-1: USB disconnect, device number 51 [ 141.611237][ T293] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.701845][ T6191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.762310][ T6210] device bridge1 entered promiscuous mode [ 141.775910][ T6215] device bridge_slave_1 left promiscuous mode [ 141.792546][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.808321][ T6215] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 141.836549][ T6221] device veth0 entered promiscuous mode [ 141.855150][ T6229] tc_dump_action: action bad kind [ 142.071726][ T6291] xt_socket: unknown flags 0x58 [ 142.151100][ T2214] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 142.363552][ T6348] device ip6erspan0 entered promiscuous mode [ 142.388989][ T2214] usb 3-1: Using ep0 maxpacket: 32 [ 142.431324][ T6356] x_tables: duplicate underflow at hook 2 [ 142.522233][ T2214] usb 3-1: config 1 has an invalid interface number: 6 but max is 1 [ 142.540002][ T2214] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.567977][ T2214] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 142.586369][ T2214] usb 3-1: config 1 has no interface number 2 [ 142.595086][ T6384] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.604102][ T2214] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.624597][ T2214] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.641760][ T2214] usb 3-1: config 1 interface 1 has no altsetting 0 [ 142.798063][ T2214] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.814826][ T2214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.835964][ T2214] usb 3-1: Product: syz [ 142.844344][ T6413] TCP: TCP_TX_DELAY enabled [ 142.852150][ T2214] usb 3-1: Manufacturer: syz [ 142.860112][ T2214] usb 3-1: SerialNumber: syz [ 142.874495][ T6416] xt_TCPMSS: Only works on TCP SYN packets [ 142.918101][ T6423] xt_hashlimit: invalid interval [ 142.939808][ T6427] 9pnet: Could not find request transport: xen [ 143.045369][ T6447] device bridge1 entered promiscuous mode [ 143.093350][ T6455] netlink: 'syz.3.2795': attribute type 1 has an invalid length. [ 143.131359][ T2214] usb 3-1: selecting invalid altsetting 0 [ 143.137155][ T2214] usb 3-1: selecting invalid altsetting 0 [ 143.144111][ T6459] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 143.145667][ T2214] cdc_ncm 3-1:1.0: bind() failure [ 143.161799][ T2214] cdc_ncm 3-1:1.6: bind() failure [ 143.170491][ T2214] usb 3-1: selecting invalid altsetting 0 [ 143.185552][ T2214] cdc_ncm: probe of 3-1:1.1 failed with error -22 [ 143.203688][ T2214] usb 3-1: selecting invalid altsetting 0 [ 143.212515][ T2214] cdc_mbim: probe of 3-1:1.1 failed with error -22 [ 143.227979][ T2214] usb 3-1: USB disconnect, device number 56 [ 143.247434][ T6471] netlink: 'syz.3.2803': attribute type 29 has an invalid length. [ 143.265206][ T6471] netlink: 'syz.3.2803': attribute type 29 has an invalid length. [ 143.342521][ T6309] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:2, type:0, next_blkoff:0, blkofs:1 [ 143.357415][ T6309] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 143.433431][ T24] kauditd_printk_skb: 72 callbacks suppressed [ 143.433439][ T24] audit: type=1400 audit(2000000797.696:296): avc: denied { bind } for pid=6497 comm="syz.1.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.521517][ T6510] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 143.526011][ T24] audit: type=1400 audit(2000000797.696:297): avc: denied { name_bind } for pid=6497 comm="syz.1.2814" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 143.588946][ T24] audit: type=1400 audit(2000000797.696:298): avc: denied { node_bind } for pid=6497 comm="syz.1.2814" saddr=::ffff:10.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 143.631269][ T24] audit: type=1326 audit(2000000797.885:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.2825" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 143.703160][ T24] audit: type=1326 audit(2000000797.885:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.2825" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 143.767089][ T24] audit: type=1326 audit(2000000797.885:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.2825" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 143.821638][ T24] audit: type=1326 audit(2000000797.885:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.2825" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 143.894555][ T24] audit: type=1326 audit(2000000797.885:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6517 comm="syz.4.2825" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 143.973845][ T24] audit: type=1400 audit(2000000797.896:304): avc: denied { getopt } for pid=6521 comm="syz.3.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.993564][ T24] audit: type=1400 audit(2000000798.169:305): avc: denied { read } for pid=6552 comm="syz.4.2843" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.033045][ T6573] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001, [ 144.049399][ T6573] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.143635][ T6607] SELinux: failed to load policy [ 144.323430][ T6650] netlink: 'syz.4.2888': attribute type 32 has an invalid length. [ 144.352071][ T6656] netlink: 'syz.2.2891': attribute type 12 has an invalid length. [ 144.492144][ T6685] __nla_validate_parse: 22 callbacks suppressed [ 144.492153][ T6685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2906'. [ 144.614953][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2922'. [ 144.686247][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 144.724946][ T6755] netlink: 'syz.4.2939': attribute type 12 has an invalid length. [ 144.837281][ T6803] x_tables: unsorted underflow at hook 2 [ 144.846648][ T6806] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 144.861001][ T6806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.965579][ T6848] device ipip0 entered promiscuous mode [ 145.009366][ T6865] netlink: 'syz.0.2995': attribute type 7 has an invalid length. [ 145.022697][ T6865] netlink: 'syz.0.2995': attribute type 8 has an invalid length. [ 145.030576][ T6865] netlink: 'syz.0.2995': attribute type 13 has an invalid length. [ 145.065512][ T6880] netlink: 'syz.4.3001': attribute type 3 has an invalid length. [ 145.073648][ T6880] netlink: 'syz.4.3001': attribute type 3 has an invalid length. [ 145.081987][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 145.093498][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.101599][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3006'. [ 145.152250][ T6908] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3014'. [ 145.229076][ T6932] device macsec0 entered promiscuous mode [ 145.237227][ T6932] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 145.267663][ T6942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3033'. [ 145.280372][ T6942] tc_dump_action: action bad kind [ 145.303974][ T6948] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 145.341980][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'. [ 145.553571][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 145.558726][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3084'. [ 145.634392][ T7068] netlink: 'syz.4.3095': attribute type 30 has an invalid length. [ 145.723721][ T7104] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.778709][ T7122] netlink: 'syz.4.3121': attribute type 4 has an invalid length. [ 145.809052][ T7126] xt_CT: No such helper "snmp_trap" [ 145.957684][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.966976][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.975769][ T7173] device sit0 left promiscuous mode [ 145.991683][ T7173] device ipip0 left promiscuous mode [ 145.997138][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 146.004718][ T7173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 146.014104][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 146.031005][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.040228][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 146.057222][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.065453][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.073526][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.081873][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.090190][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.109427][ T7191] IPv6: A: Disabled Multicast RS [ 146.187924][ T7219] device veth0_to_bond entered promiscuous mode [ 146.475629][ T7328] device batadv_slave_0 entered promiscuous mode [ 146.905750][ T7475] device ipip0 entered promiscuous mode [ 146.984577][ T7494] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 147.252534][ T7570] tc_dump_action: action bad kind [ 147.295383][ T7580] device bridge2 entered promiscuous mode [ 147.594243][ T7683] device vlan0 entered promiscuous mode [ 147.665855][ T7710] x_tables: duplicate entry at hook 3 [ 147.699371][ T7717] IPv6: sit1: Disabled Multicast RS [ 147.705753][ T7723] x_tables: duplicate entry at hook 1 [ 147.798867][ T7751] x_tables: duplicate entry at hook 3 [ 147.851405][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.217067][ T24] kauditd_printk_skb: 811 callbacks suppressed [ 148.217079][ T24] audit: type=1400 audit(2000001570.710:1117): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.282840][ T24] audit: type=1400 audit(2000001570.710:1118): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.341417][ T24] audit: type=1400 audit(2000001570.710:1119): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.393536][ T24] audit: type=1400 audit(2000001570.731:1120): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.452230][ T7933] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.460493][ T24] audit: type=1400 audit(2000001570.731:1121): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.517294][ T24] audit: type=1400 audit(2000001570.752:1122): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.577924][ T7965] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 148.582392][ T24] audit: type=1400 audit(2000001570.763:1123): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.608557][ T7959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.622467][ T24] audit: type=1400 audit(2000001570.773:1124): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.673654][ T24] audit: type=1400 audit(2000001570.784:1125): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.698404][ T24] audit: type=1400 audit(2000001570.784:1126): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 149.016923][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.165161][ T8125] device vti0 entered promiscuous mode [ 149.196886][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.205316][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.234529][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 149.241994][ T8134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 149.251833][ T8143] IPv6: sit1: Disabled Multicast RS [ 149.268259][ T8149] validate_nla: 6 callbacks suppressed [ 149.268268][ T8149] netlink: 'syz.1.3632': attribute type 7 has an invalid length. [ 149.283046][ T8149] netlink: 'syz.1.3632': attribute type 8 has an invalid length. [ 149.316522][ T8157] IPv6: sit2: Disabled Multicast RS [ 149.339194][ T8162] __nla_validate_parse: 71 callbacks suppressed [ 149.339202][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 149.388251][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 149.405793][ T8185] netlink: 'syz.0.3649': attribute type 5 has an invalid length. [ 149.414961][ T8185] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3649'. [ 149.428018][ T8195] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.453336][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3658'. [ 149.509086][ T8220] netlink: 'syz.3.3668': attribute type 7 has an invalid length. [ 149.516923][ T8223] x_tables: duplicate underflow at hook 1 [ 149.523023][ T8220] netlink: 'syz.3.3668': attribute type 5 has an invalid length. [ 149.530972][ T8220] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3668'. [ 149.583782][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3680'. [ 149.609775][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3680'. [ 149.744428][ T8292] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.760152][ T8292] bridge0: port 3(veth0_to_bridge) entered disabled state [ 149.767895][ T8292] device veth0_to_bridge entered promiscuous mode [ 149.777592][ T8292] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.790870][ T8292] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.798004][ T8292] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 149.827464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.839524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.851551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.863542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.875562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.887570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.899575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.911566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.923577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.987365][ T8339] netlink: 'syz.0.3727': attribute type 3 has an invalid length. [ 150.014908][ T8344] xt_NFQUEUE: number of total queues is 0 [ 150.047659][ T8347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.287615][ T8395] xt_TCPMSS: Only works on TCP SYN packets [ 150.598795][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3786'. [ 150.688429][ T8472] x_tables: unsorted underflow at hook 3 [ 150.756595][ T8482] IPv6: sit3: Disabled Multicast RS [ 151.137295][ T8563] xt_socket: unknown flags 0xc [ 151.309032][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'. [ 151.363929][ T8603] device macsec0 entered promiscuous mode [ 151.453605][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'. [ 151.860068][ T2214] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 152.256183][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.396592][ T8671] netlink: 'syz.4.3891': attribute type 13 has an invalid length. [ 153.012601][ T8708] xt_TCPMSS: Only works on TCP SYN packets [ 153.030920][ T24] kauditd_printk_skb: 1041 callbacks suppressed [ 153.030932][ T24] audit: type=1400 audit(2000001575.771:2168): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.216431][ T24] audit: type=1400 audit(2000001575.939:2169): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.319192][ T24] audit: type=1400 audit(2000001575.939:2170): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.379551][ C0] net_ratelimit: 113254 callbacks suppressed [ 153.379564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.397570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.409564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.421547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.433564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.445533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.457487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.459705][ T24] audit: type=1400 audit(2000001575.950:2171): avc: denied { read write } for pid=8712 comm="syz.2.3912" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 153.469473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.504810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.516793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.611827][ T24] audit: type=1400 audit(2000001576.076:2172): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.731478][ T24] audit: type=1400 audit(2000001576.076:2173): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.881899][ T24] audit: type=1400 audit(2000001576.265:2174): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.000291][ T24] audit: type=1400 audit(2000001576.412:2175): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.086666][ T24] audit: type=1400 audit(2000001576.454:2176): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.187921][ T24] audit: type=1400 audit(2000001576.496:2177): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 154.296597][ T8756] __nla_validate_parse: 3 callbacks suppressed [ 154.296605][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3933'. [ 154.348073][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3933'. [ 154.905275][ T8789] syz.0.3949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.770648][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 155.877038][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 155.926302][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 155.960730][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 155.989563][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 156.018995][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 156.063469][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 156.091931][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 156.115731][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3958'. [ 156.137382][ T8816] netlink: 'syz.2.3961': attribute type 21 has an invalid length. [ 157.474938][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.513941][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.813215][ T24] kauditd_printk_skb: 686 callbacks suppressed [ 157.813228][ T24] audit: type=1400 audit(2000001580.790:2864): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.951438][ T24] audit: type=1400 audit(2000001580.874:2865): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.066401][ T24] audit: type=1400 audit(2000001580.895:2866): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.151691][ C0] net_ratelimit: 173403 callbacks suppressed [ 158.151703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.169699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.181684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.193670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.199331][ T24] audit: type=1400 audit(2000001580.968:2867): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.205634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.241568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.253537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.265542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.277519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.289514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.360836][ T24] audit: type=1400 audit(2000001580.979:2868): avc: denied { read write } for pid=8827 comm="syz.2.3966" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.485067][ T24] audit: type=1400 audit(2000001581.031:2869): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.615046][ T24] audit: type=1400 audit(2000001581.042:2870): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.741990][ T24] audit: type=1326 audit(2000001581.052:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.4004" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177e33ce99 code=0x7ffc0000 [ 158.886123][ T24] audit: type=1326 audit(2000001581.063:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.4004" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f177e33ce99 code=0x7ffc0000 [ 158.996249][ T24] audit: type=1326 audit(2000001581.063:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.3.4004" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177e33ce99 code=0x7ffc0000 [ 159.258753][ T8956] __nla_validate_parse: 16 callbacks suppressed [ 159.258762][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4031'. [ 161.448709][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 161.475791][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 161.504733][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 162.363257][ T9147] kernel profiling enabled (shift: 16) [ 162.593268][ T24] kauditd_printk_skb: 166 callbacks suppressed [ 162.593280][ T24] audit: type=1400 audit(2000001585.819:3040): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.740228][ T24] audit: type=1400 audit(2000001585.840:3041): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.873535][ T24] audit: type=1400 audit(2000001585.882:3042): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 162.923383][ C0] net_ratelimit: 154588 callbacks suppressed [ 162.923395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.941388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.953360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.965339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.977293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.989307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.001273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.002756][ T24] audit: type=1326 audit(2000001585.934:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.4135" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 163.013233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.049974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.061945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.189731][ T24] audit: type=1326 audit(2000001585.934:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.4135" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 163.314782][ T24] audit: type=1326 audit(2000001585.955:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.4135" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 163.450270][ T24] audit: type=1326 audit(2000001585.955:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.4135" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 163.537724][ T9212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.571284][ T24] audit: type=1326 audit(2000001585.955:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.4135" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bc8edb707 code=0x7ffc0000 [ 163.704419][ T24] audit: type=1400 audit(2000001585.955:3048): avc: denied { create } for pid=9167 comm="syz.4.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 163.813004][ T24] audit: type=1326 audit(2000001585.955:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.4135" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc8ed9e99 code=0x7ffc0000 [ 163.837986][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 164.191270][ T9249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4171'. [ 164.238935][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.829670][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 164.923620][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 165.552690][ T9333] netlink: 'syz.3.4212': attribute type 4 has an invalid length. [ 165.560437][ T9333] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4212'. [ 165.962193][ T9356] netlink: 'syz.4.4225': attribute type 3 has an invalid length. [ 166.373263][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 166.420869][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4239'. [ 166.740808][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4247'. [ 166.894904][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.257268][ T9435] device sit0 entered promiscuous mode [ 167.282038][ T9435] netlink: 'syz.3.4262': attribute type 1 has an invalid length. [ 167.308988][ T9435] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4262'. [ 167.377546][ T24] kauditd_printk_skb: 165 callbacks suppressed [ 167.377558][ T24] audit: type=1400 audit(2000001590.838:3215): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.542778][ T24] audit: type=1400 audit(2000001590.869:3216): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.581414][ T24] audit: type=1400 audit(2000001590.869:3217): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.615916][ T24] audit: type=1400 audit(2000001590.995:3218): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.695107][ C0] net_ratelimit: 143789 callbacks suppressed [ 167.695120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.713141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.725159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.737197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.749192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.761246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.770408][ T24] audit: type=1400 audit(2000001591.174:3219): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.773229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.809222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.821576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.829714][ T9458] xt_hashlimit: overflow, try lower: 3/0 [ 167.833579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.906799][ T24] audit: type=1400 audit(2000001591.174:3220): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.037828][ T24] audit: type=1400 audit(2000001591.195:3221): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.168549][ T24] audit: type=1400 audit(2000001591.205:3222): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.294995][ T24] audit: type=1400 audit(2000001591.342:3223): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.411101][ T24] audit: type=1400 audit(2000001591.363:3224): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 168.854488][ T9519] x_tables: duplicate entry at hook 3 [ 168.964041][ T9524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 169.384663][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4320'. [ 169.754216][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.804741][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.832035][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.861552][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.887915][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.909557][ T9584] netlink: 5412 bytes leftover after parsing attributes in process `syz.4.4336'. [ 169.927049][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.953190][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 169.981672][ T9574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4331'. [ 171.484659][ T9674] xt_nat: multiple ranges no longer supported [ 171.705118][ T9687] netlink: 'syz.0.4388': attribute type 1 has an invalid length. [ 171.914268][ T9700] device veth1_macvtap left promiscuous mode [ 172.147686][ T24] kauditd_printk_skb: 136 callbacks suppressed [ 172.147698][ T24] audit: type=1400 audit(2000001595.846:3361): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.279150][ T24] audit: type=1400 audit(2000001595.919:3362): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.402906][ T24] audit: type=1400 audit(2000001595.930:3363): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.466814][ C0] net_ratelimit: 145847 callbacks suppressed [ 172.466827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.484879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.496899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.505025][ T24] audit: type=1400 audit(2000001596.024:3364): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.508912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.543049][ T24] audit: type=1400 audit(2000001596.056:3365): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.544808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.569782][ T24] audit: type=1400 audit(2000001596.087:3366): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.580725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.616685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.628615][ T24] audit: type=1400 audit(2000001596.098:3367): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.628731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.653807][ T24] audit: type=1400 audit(2000001596.171:3368): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.664716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.690540][ T24] audit: type=1400 audit(2000001596.203:3369): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.700622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.725774][ T24] audit: type=1400 audit(2000001596.213:3370): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 172.822751][ T9735] netlink: 'syz.1.4392': attribute type 12 has an invalid length. [ 173.017709][ T9748] xt_CONNSECMARK: invalid mode: 0 [ 173.210097][ T9760] netlink: 'syz.4.4425': attribute type 12 has an invalid length. [ 174.309524][ T9834] __nla_validate_parse: 14 callbacks suppressed [ 174.309533][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4461'. [ 174.885363][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4478'. [ 175.041119][ T9875] device veth0 left promiscuous mode [ 175.101157][ T9875] device veth1_macvtap entered promiscuous mode [ 175.125222][ T9875] device macsec0 left promiscuous mode [ 175.151444][ T9875] device ipip0 left promiscuous mode [ 175.166188][ T9875] device vti0 left promiscuous mode [ 175.188507][ T25] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 175.202851][ T25] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 175.210542][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 175.237369][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.260823][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.267909][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.323731][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 175.358529][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.396606][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 175.404560][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 175.464577][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.472726][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 175.506165][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.524697][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.535237][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.544744][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.554079][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 175.895854][ T9915] bridge0: port 3(veth0_to_bridge) entered disabled state [ 175.903398][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.936872][ T9915] device veth0_to_bond left promiscuous mode [ 175.953332][ T9915] device vlan0 left promiscuous mode [ 176.030486][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.038034][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.057487][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.143254][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.268047][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 176.453888][ T9978] netlink: 'syz.4.4533': attribute type 9 has an invalid length. [ 176.619930][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4540'. [ 176.722838][T10003] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4544'. [ 176.739370][T10005] netlink: 'syz.1.4546': attribute type 13 has an invalid length. [ 176.767196][T10011] netlink: 'syz.2.4545': attribute type 4 has an invalid length. [ 176.793058][T10011] netlink: 'syz.2.4545': attribute type 30 has an invalid length. [ 176.920383][ T24] kauditd_printk_skb: 180 callbacks suppressed [ 176.920396][ T24] audit: type=1400 audit(2000001600.854:3552): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 176.981395][ T24] audit: type=1400 audit(2000001600.854:3551): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.047872][ T24] audit: type=1400 audit(2000001600.865:3553): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.112731][ T24] audit: type=1400 audit(2000001600.865:3554): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.181351][ T24] audit: type=1400 audit(2000001600.865:3555): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.229001][ T24] audit: type=1400 audit(2000001600.917:3556): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.287720][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4576'. [ 177.301271][ T24] audit: type=1400 audit(2000001600.959:3557): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.311738][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4576'. [ 177.362469][ T24] audit: type=1400 audit(2000001600.970:3558): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.438522][ T24] audit: type=1400 audit(2000001600.991:3560): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.512528][ T24] audit: type=1400 audit(2000001600.980:3559): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 177.626310][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4589'. [ 177.656935][T10095] net_ratelimit: 98376 callbacks suppressed [ 177.656943][T10095] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 177.749452][T10113] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4597'. [ 177.963646][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'. [ 178.317508][T10185] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.4634'. [ 178.409669][T10196] xt_TCPMSS: Only works on TCP SYN packets [ 178.925538][T10262] printk: syz.0.4675 (10262): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 179.255278][T10304] netlink: 'syz.0.4693': attribute type 3 has an invalid length. [ 179.262774][T10307] : renamed from bond_slave_0 [ 179.955592][T10382] xt_CT: No such helper "netbios-ns" [ 180.000383][ C1] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 180.000390][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.168563][T10403] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 180.391181][T10424] syz.4.4751 (10424): /proc/10421/oom_adj is deprecated, please use /proc/10421/oom_score_adj instead. [ 180.448203][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 180.497368][T10429] netlink: 'syz.2.4753': attribute type 2 has an invalid length. [ 180.505114][T10429] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 180.704550][T10452] x_tables: duplicate underflow at hook 3 [ 180.711647][T10453] page size migration: [10453 (syz.1.4756)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 181.011125][T10472] netlink: 'syz.2.4771': attribute type 12 has an invalid length. [ 181.076725][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4774'. [ 181.429629][T10510] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 181.690695][ T24] kauditd_printk_skb: 1855 callbacks suppressed [ 181.690707][ T24] audit: type=1400 audit(2000001605.862:5416): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.788960][ T24] audit: type=1400 audit(2000001605.883:5417): avc: denied { read write } for pid=278 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 181.789950][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'. [ 181.824153][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.837048][ T133] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 181.842247][ T24] audit: type=1400 audit(2000001605.894:5418): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.854741][ T133] audit: backlog limit exceeded [ 181.867608][ T24] audit: type=1400 audit(2000001605.894:5419): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.874946][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.900231][ T133] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 181.922504][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.024545][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4814'. [ 182.132859][T10563] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4819'. [ 182.374218][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4831'. [ 182.408101][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4831'. [ 182.534278][T10600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.393275][T10663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4867'. [ 183.436546][T10663] netlink: 'syz.3.4867': attribute type 3 has an invalid length. [ 183.465066][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4867'. [ 183.609124][T10680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4869'. [ 184.005128][T10714] netlink: 'syz.4.4889': attribute type 3 has an invalid length. [ 184.024410][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.273714][T10734] xt_socket: unknown flags 0x40 [ 184.848037][T10786] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 185.260649][T10820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4944'. [ 185.303770][T10826] device sit0 left promiscuous mode [ 185.329630][T10826] device bridge1 left promiscuous mode [ 185.565554][T10846] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 185.871996][T10873] __nla_validate_parse: 125 callbacks suppressed [ 185.872005][T10873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4968'. [ 185.896653][T10873] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4968'. [ 185.915713][T10873] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4968'. [ 185.942393][T10876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4971'. [ 186.458297][ T24] kauditd_printk_skb: 4208 callbacks suppressed [ 186.458308][ T24] audit: type=1400 audit(2000001610.871:9568): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.546445][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.546828][T10926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.570066][ T279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.572870][ T24] audit: type=1400 audit(2000001610.871:9569): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 186.583268][T10926] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 186.599377][ T133] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 186.634468][ T133] audit: backlog limit exceeded [ 186.634513][ T279] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 186.645108][ T280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 186.734359][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.896473][T10949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.903705][T10949] IPv6: NLM_F_CREATE should be set when creating new route [ 187.172486][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.382442][ T25] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.620025][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.927892][T11038] xt_l2tp: v2 tid > 0xffff: 262144 [ 188.044503][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5059'. [ 188.220066][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 188.372863][ T293] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.380798][ T293] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.582056][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 188.624007][T11102] device ipip2 entered promiscuous mode [ 188.654648][T11103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5083'. [ 188.839521][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.324443][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5116'. [ 189.343329][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5116'. [ 189.363953][T11166] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5116'. [ 190.160698][T11237] xt_hashlimit: max too large, truncated to 1048576 [ 190.186004][T11237] xt_hashlimit: overflow, try lower: 137438953472/8 [ 190.333915][T11255] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.373093][T11255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.380324][T11255] IPv6: NLM_F_CREATE should be set when creating new route [ 190.387549][T11255] IPv6: NLM_F_CREATE should be set when creating new route [ 190.861631][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5185'. [ 190.973335][T11316] x_tables: duplicate underflow at hook 2 [ 191.127125][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5198'. [ 191.239723][ T24] kauditd_printk_skb: 4419 callbacks suppressed [ 191.239734][ T24] audit: type=1400 audit(2000001615.889:13901): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.337873][ T24] audit: type=1400 audit(2000001615.889:13902): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.345122][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.377282][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.379077][ T278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.388218][ T279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.396516][ T24] audit: type=1400 audit(2000001615.889:13903): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.401308][ T282] audit: audit_lost=55 audit_rate_limit=0 audit_backlog_limit=64 [ 191.419947][ T278] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 191.438884][ T279] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 191.682843][T11379] x_tables: unsorted underflow at hook 1 [ 191.883383][T11399] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 192.247533][T11429] xt_ecn: cannot match TCP bits for non-tcp packets [ 192.410847][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.532811][T11450] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 192.589111][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5259'. [ 192.617559][T11455] netlink: 'syz.2.5259': attribute type 5 has an invalid length. [ 193.041454][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5281'. [ 193.504428][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.554857][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.618448][T11532] device ipip2 left promiscuous mode [ 193.944699][T11563] ipt_REJECT: ECHOREPLY no longer supported. [ 194.046292][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5314'. [ 194.381077][T11598] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 0 [ 194.387680][T11599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5328'. [ 194.928082][T11646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5352'. [ 195.158242][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5361'. [ 195.242675][T11669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.249912][T11669] IPv6: NLM_F_CREATE should be set when creating new route [ 195.257135][T11669] IPv6: NLM_F_CREATE should be set when creating new route [ 195.481852][T11686] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.952779][T11723] netlink: 'syz.2.5390': attribute type 13 has an invalid length. [ 196.011169][ T24] kauditd_printk_skb: 4158 callbacks suppressed [ 196.011180][ T24] audit: type=1400 audit(2000001620.908:17916): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.102413][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.108993][ T24] audit: type=1400 audit(2000001620.939:17917): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.144346][ T133] audit: audit_lost=106 audit_rate_limit=0 audit_backlog_limit=64 [ 196.182447][ T133] audit: backlog limit exceeded [ 196.183927][ T280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.197248][ T24] audit: type=1400 audit(2000001620.939:17918): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 196.218941][ T280] audit: audit_lost=107 audit_rate_limit=0 audit_backlog_limit=64 [ 196.220459][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.248955][ T280] audit: backlog limit exceeded [ 197.027206][T11775] device sit0 entered promiscuous mode [ 197.064777][T11775] netlink: 'syz.4.5416': attribute type 1 has an invalid length. [ 197.107032][T11775] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5416'. [ 197.131857][T11778] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5417'. [ 197.149255][T11780] device vti1 entered promiscuous mode [ 197.253410][T11788] xt_l2tp: missing protocol rule (udp|l2tpip) [ 197.374307][T11796] netlink: 'syz.3.5426': attribute type 13 has an invalid length. [ 197.415892][T11796] gretap0: refused to change device tx_queue_len [ 197.441386][T11796] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.415467][T11879] netlink: 'syz.3.5467': attribute type 3 has an invalid length. [ 198.466524][T11884] x_tables: duplicate entry at hook 2 [ 198.522573][T11887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1009 sclass=netlink_audit_socket pid=11887 comm=syz.3.5471 [ 198.941887][T11924] netlink: 'syz.1.5488': attribute type 12 has an invalid length. [ 199.066718][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5492'. [ 199.102556][T11936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.110047][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5492'. [ 199.340681][T11958] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.501987][T11972] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 199.670874][T11984] netlink: 'syz.1.5517': attribute type 3 has an invalid length. [ 200.410942][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.782579][ T24] kauditd_printk_skb: 4290 callbacks suppressed [ 200.782589][ T24] audit: type=1400 audit(2000001625.916:22117): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.850744][T12050] device vlan0 entered promiscuous mode [ 200.856431][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5553'. [ 200.883013][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.887781][ T24] audit: type=1400 audit(2000001625.916:22118): avc: denied { read write } for pid=281 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.889995][T12064] netlink: 'syz.0.5558': attribute type 3 has an invalid length. [ 200.926639][ T133] audit: audit_lost=139 audit_rate_limit=0 audit_backlog_limit=64 [ 200.944742][ T133] audit: backlog limit exceeded [ 200.952243][T12067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.953395][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.966139][ T133] audit: audit_lost=140 audit_rate_limit=0 audit_backlog_limit=64 [ 200.974447][ T133] audit: backlog limit exceeded [ 200.976451][T12067] audit: audit_lost=141 audit_rate_limit=0 audit_backlog_limit=64 [ 200.985253][T12068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.994319][T12068] IPv6: NLM_F_CREATE should be set when creating new route [ 201.001541][T12068] IPv6: NLM_F_CREATE should be set when creating new route [ 201.285857][T12095] netlink: 'syz.3.5573': attribute type 3 has an invalid length. [ 201.316196][T12095] netlink: 'syz.3.5573': attribute type 3 has an invalid length. [ 201.591588][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5590'. [ 201.601648][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'. [ 201.626557][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5590'. [ 201.659917][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5590'. [ 201.678191][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5590'. [ 201.697695][T12124] device sit0 left promiscuous mode [ 202.078908][T12167] __nla_validate_parse: 62 callbacks suppressed [ 202.078916][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5609'. [ 202.161654][T12173] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 202.859012][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.119261][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.142998][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.165220][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.195044][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.216612][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.239428][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.264694][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.288828][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.311383][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 203.688015][T12357] xt_SECMARK: invalid mode: 2 [ 203.695824][T12361] xt_TCPMSS: Only works on TCP SYN packets [ 203.701827][T12363] xt_l2tp: invalid flags combination: 0 [ 203.809086][T12381] xt_TCPMSS: Only works on TCP SYN packets [ 204.445589][T12488] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.868461][T12558] xt_policy: too many policy elements [ 205.046663][T12591] xt_TCPMSS: Only works on TCP SYN packets [ 205.288133][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 205.295753][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 205.486588][T12651] netlink: 'syz.2.5849': attribute type 6 has an invalid length. [ 205.556143][ T24] kauditd_printk_skb: 11173 callbacks suppressed [ 205.556154][ T24] audit: type=1400 audit(2000000003.233:32742): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.592165][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.594034][ T280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.608512][ T278] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.609359][ T279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.615227][ T133] audit: audit_lost=325 audit_rate_limit=0 audit_backlog_limit=64 [ 205.621630][ T280] audit: audit_lost=326 audit_rate_limit=0 audit_backlog_limit=64 [ 205.629809][ T278] audit: audit_lost=327 audit_rate_limit=0 audit_backlog_limit=64 [ 205.645359][ T133] audit: backlog limit exceeded [ 205.650242][ T280] audit: backlog limit exceeded [ 205.887116][T12700] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.582321][T12833] xt_hashlimit: max too large, truncated to 1048576 [ 206.694645][T12852] xt_bpf: check failed: parse error [ 206.768371][T12869] netlink: 'syz.0.5957': attribute type 6 has an invalid length. [ 206.825516][T12878] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 207.147141][T12923] __nla_validate_parse: 71 callbacks suppressed [ 207.147149][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5982'. [ 207.259997][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5987'. [ 207.280031][T12934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5987'. [ 207.312396][T12934] device ip6tnl3 entered promiscuous mode [ 207.329625][T12941] device vlan0 entered promiscuous mode [ 207.960261][T13010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.019511][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6028'. [ 208.081250][T13026] ================================================================== [ 208.089359][T13026] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 208.097504][T13026] Read of size 4 at addr ffff888112c82470 by task syz.1.6032/13026 [ 208.105382][T13026] [ 208.107718][T13026] CPU: 0 PID: 13026 Comm: syz.1.6032 Tainted: G W syzkaller #0 [ 208.116559][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.126606][T13026] Call Trace: [ 208.129897][T13026] __dump_stack+0x21/0x24 [ 208.134237][T13026] dump_stack_lvl+0x1a7/0x208 [ 208.138915][T13026] ? show_regs_print_info+0x18/0x18 [ 208.144122][T13026] ? thaw_kernel_threads+0x220/0x220 [ 208.149404][T13026] print_address_description+0x7f/0x2c0 [ 208.154952][T13026] ? unaccount_page_cache_page+0x9dc/0xac0 [ 208.160756][T13026] kasan_report+0x100/0x140 [ 208.165255][T13026] ? xas_store+0xd0c/0x18d0 [ 208.169755][T13026] ? unaccount_page_cache_page+0x9dc/0xac0 [ 208.175565][T13026] __asan_report_load4_noabort+0x14/0x20 [ 208.181194][T13026] unaccount_page_cache_page+0x9dc/0xac0 [ 208.186828][T13026] __delete_from_page_cache+0xc3/0x470 [ 208.192281][T13026] ? memset+0x35/0x40 [ 208.196268][T13026] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 208.203289][T13026] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 208.206726][T13044] netlink: 'syz.2.6043': attribute type 20 has an invalid length. [ 208.208743][T13026] ? __kasan_check_read+0x11/0x20 [ 208.208761][T13026] ? workingset_eviction+0x3dc/0x940 [ 208.216634][T13044] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.221555][T13026] __remove_mapping+0x581/0x6b0 [ 208.221566][T13026] shrink_page_list+0x21ee/0x4160 [ 208.221579][T13026] ? shrink_page_list+0x1f41/0x4160 [ 208.221596][T13026] ? reclaim_clean_pages_from_list+0x740/0x740 [ 208.255801][T13026] ? shrink_inactive_list+0xef0/0xef0 [ 208.261181][T13026] ? __count_memcg_events+0x89/0x210 [ 208.261196][T13026] shrink_inactive_list+0x90c/0xef0 [ 208.261208][T13026] ? __this_cpu_preempt_check+0x13/0x20 [ 208.261221][T13026] ? shrink_active_list+0xe00/0xe00 [ 208.261231][T13026] ? inactive_is_low+0x2f0/0x2f0 [ 208.261242][T13026] ? __kasan_check_read+0x11/0x20 [ 208.261252][T13026] ? __kasan_check_read+0x11/0x20 [ 208.261262][T13026] ? lruvec_lru_size+0x230/0x250 [ 208.261274][T13026] ? blk_start_plug+0x5a/0x170 [ 208.261284][T13026] shrink_lruvec+0x2806/0x2d70 [ 208.261295][T13026] ? do_sys_openat2+0x19f/0x750 [ 208.261304][T13026] ? __x64_sys_openat+0x136/0x160 [ 208.261314][T13026] ? do_syscall_64+0x31/0x40 [ 208.261328][T13026] ? __kasan_check_write+0x14/0x20 [ 208.261340][T13026] ? down_read_trylock+0x106/0x160 [ 208.261350][T13026] ? __init_rwsem+0x1c0/0x1c0 [ 208.261360][T13026] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 208.261371][T13026] ? __kasan_check_write+0x14/0x20 [ 208.261379][T13026] ? up_read+0x12/0x50 [ 208.261388][T13026] ? shrink_slab+0x671/0x830 [ 208.261400][T13026] ? cgroup_file_open+0x8a/0x2a0 [ 208.261411][T13026] ? __kasan_check_read+0x11/0x20 [ 208.261420][T13026] ? inactive_is_low+0x17a/0x2f0 [ 208.261429][T13026] ? __kasan_check_write+0x14/0x20 [ 208.261441][T13026] shrink_node+0xee0/0x2690 [ 208.261455][T13026] ? ktime_get+0x10e/0x140 [ 208.261466][T13026] do_try_to_free_pages+0x602/0x1590 [ 208.261479][T13026] ? try_to_free_pages+0xc20/0xc20 [ 208.261492][T13026] try_to_free_mem_cgroup_pages+0x261/0x610 [ 208.261501][T13026] ? shrink_lruvec+0x2d70/0x2d70 [ 208.261514][T13026] mem_cgroup_resize_max+0x309/0x3e0 [ 208.261525][T13026] mem_cgroup_write+0x1ed/0x230 [ 208.261535][T13026] ? mem_cgroup_reset+0x130/0x130 [ 208.261552][T13026] ? mem_cgroup_reset+0x130/0x130 [ 208.261562][T13026] cgroup_file_write+0x294/0x560 [ 208.261573][T13026] ? cgroup_seqfile_stop+0xc0/0xc0 [ 208.261583][T13026] ? mutex_lock+0x92/0xf0 [ 208.261592][T13026] ? mutex_trylock+0xb0/0xb0 [ 208.261603][T13026] ? __kasan_check_write+0x14/0x20 [ 208.261612][T13026] ? cgroup_seqfile_stop+0xc0/0xc0 [ 208.261623][T13026] kernfs_fop_write_iter+0x2bd/0x400 [ 208.261633][T13026] vfs_write+0x770/0xd70 [ 208.261644][T13026] ? kernel_write+0x3c0/0x3c0 [ 208.261655][T13026] ? mutex_trylock+0xb0/0xb0 [ 208.261664][T13026] ? __fget_files+0x2e1/0x340 [ 208.261675][T13026] ? __fdget_pos+0x2d2/0x380 [ 208.261684][T13026] ? ksys_write+0x70/0x260 [ 208.261694][T13026] ksys_write+0x14a/0x260 [ 208.261704][T13026] ? __ia32_sys_read+0x90/0x90 [ 208.261714][T13026] ? __kasan_check_read+0x11/0x20 [ 208.261724][T13026] __x64_sys_write+0x7b/0x90 [ 208.261734][T13026] do_syscall_64+0x31/0x40 [ 208.261745][T13026] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.261754][T13026] RIP: 0033:0x7f55bfca8e99 [ 208.261764][T13026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.261772][T13026] RSP: 002b:00007f55be702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.261786][T13026] RAX: ffffffffffffffda RBX: 00007f55bff30fa0 RCX: 00007f55bfca8e99 [ 208.261798][T13026] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 208.261806][T13026] RBP: 00007f55bfd3eeaf R08: 0000000000000000 R09: 0000000000000000 [ 208.261813][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.261820][T13026] R13: 00007f55bff31038 R14: 00007f55bff30fa0 R15: 00007ffc55a70ef8 [ 208.261827][T13026] [ 208.261833][T13026] Allocated by task 279: [ 208.261843][T13026] __kasan_kmalloc+0xd4/0x100 [ 208.261852][T13026] __kmalloc+0x19f/0x330 [ 208.261861][T13026] kvmalloc_node+0x88/0x130 [ 208.261870][T13026] alloc_fdtable+0xea/0x2a0 [ 208.261877][T13026] dup_fd+0x7a2/0xab0 [ 208.261887][T13026] copy_files+0xcf/0x170 [ 208.261896][T13026] copy_process+0x12d6/0x3320 [ 208.261904][T13026] kernel_clone+0x233/0x950 [ 208.261912][T13026] __x64_sys_clone+0x198/0x210 [ 208.261921][T13026] do_syscall_64+0x31/0x40 [ 208.261930][T13026] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.261932][T13026] [ 208.261938][T13026] Freed by task 24: [ 208.261947][T13026] kasan_set_track+0x4a/0x70 [ 208.261956][T13026] kasan_set_free_info+0x23/0x40 [ 208.261965][T13026] ____kasan_slab_free+0x125/0x160 [ 208.261973][T13026] __kasan_slab_free+0x11/0x20 [ 208.261981][T13026] slab_free_freelist_hook+0xc5/0x190 [ 208.261989][T13026] kfree+0xc0/0x270 [ 208.261998][T13026] skb_release_data+0x53b/0x690 [ 208.262006][T13026] kfree_skb+0xb9/0x2f0 [ 208.262016][T13026] kauditd_hold_skb+0x116/0x210 [ 208.262025][T13026] kauditd_send_queue+0x28c/0x2e0 [ 208.262033][T13026] kauditd_thread+0x4e4/0x870 [ 208.262043][T13026] kthread+0x324/0x3b0 [ 208.262053][T13026] ret_from_fork+0x1f/0x30 [ 208.262055][T13026] [ 208.262059][T13026] Last potentially related work creation: [ 208.262068][T13026] kasan_save_stack+0x3a/0x60 [ 208.262078][T13026] __kasan_record_aux_stack+0xd2/0x100 [ 208.262088][T13026] kasan_record_aux_stack_noalloc+0xb/0x10 [ 208.262099][T13026] insert_work+0x51/0x320 [ 208.262108][T13026] __queue_work+0x91f/0xca0 [ 208.262117][T13026] queue_work_on+0xe6/0x140 [ 208.262127][T13026] destroy_super_rcu+0xd1/0xe0 [ 208.262138][T13026] rcu_do_batch+0x488/0xaf0 [ 208.262147][T13026] rcu_core+0x50a/0xca0 [ 208.262155][T13026] rcu_core_si+0x9/0x10 [ 208.262165][T13026] __do_softirq+0x255/0x563 [ 208.262168][T13026] [ 208.262171][T13026] Second to last potentially related work creation: [ 208.262181][T13026] kasan_save_stack+0x3a/0x60 [ 208.262190][T13026] __kasan_record_aux_stack+0xd2/0x100 [ 208.262199][T13026] kasan_record_aux_stack_noalloc+0xb/0x10 [ 208.262207][T13026] call_rcu+0x11a/0x1090 [ 208.262216][T13026] __put_super+0x254/0x2b0 [ 208.262226][T13026] deactivate_locked_super+0xd4/0x100 [ 208.262235][T13026] mount_bdev+0x288/0x380 [ 208.262244][T13026] f2fs_mount+0x34/0x40 [ 208.262253][T13026] legacy_get_tree+0xed/0x190 [ 208.262262][T13026] vfs_get_tree+0x89/0x260 [ 208.262271][T13026] do_new_mount+0x25a/0xa30 [ 208.262281][T13026] path_mount+0x581/0xca0 [ 208.262289][T13026] __se_sys_mount+0x320/0x390 [ 208.262298][T13026] __x64_sys_mount+0xbf/0xd0 [ 208.262306][T13026] do_syscall_64+0x31/0x40 [ 208.262315][T13026] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 208.262318][T13026] [ 208.262327][T13026] The buggy address belongs to the object at ffff888112c82000 [ 208.262327][T13026] which belongs to the cache kmalloc-2k of size 2048 [ 208.262338][T13026] The buggy address is located 1136 bytes inside of [ 208.262338][T13026] 2048-byte region [ffff888112c82000, ffff888112c82800) [ 208.262342][T13026] The buggy address belongs to the page: [ 208.262369][T13026] page:ffffea00044b2000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112c80 [ 208.262379][T13026] head:ffffea00044b2000 order:3 compound_mapcount:0 compound_pincount:0 [ 208.262387][T13026] flags: 0x4000000000010200(slab|head) [ 208.262401][T13026] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 208.262413][T13026] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 208.262417][T13026] page dumped because: kasan: bad access detected [ 208.262422][T13026] page_owner tracks the page as allocated [ 208.262443][T13026] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15, ts 22563625568, free_ts 22557481896 [ 208.262453][T13026] prep_new_page+0x176/0x190 [ 208.262462][T13026] get_page_from_freelist+0x225f/0x23f0 [ 208.262470][T13026] __alloc_pages_nodemask+0x29a/0x640 [ 208.262478][T13026] new_slab+0x84/0x3f0 [ 208.262487][T13026] ___slab_alloc+0x2f8/0x4c0 [ 208.262495][T13026] __slab_alloc+0x63/0xa0 [ 208.262504][T13026] __kmalloc_track_caller+0x1e4/0x310 [ 208.262514][T13026] __alloc_skb+0xdc/0x520 [ 208.262523][T13026] alloc_skb_with_frags+0xa3/0x560 [ 208.262533][T13026] sock_alloc_send_pskb+0x87f/0x9a0 [ 208.262548][T13026] sock_alloc_send_skb+0x32/0x40 [ 208.262559][T13026] mld_newpack+0x1b3/0x9e0 [ 208.262568][T13026] add_grec+0xedf/0x1330 [ 208.262578][T13026] mld_send_initial_cr+0x1f1/0x2b0 [ 208.262587][T13026] ipv6_mc_dad_complete+0x76/0x3c0 [ 208.262597][T13026] addrconf_dad_completed+0x74c/0xe30 [ 208.262601][T13026] page last free stack trace: [ 208.262611][T13026] __free_pages_ok+0x80b/0x830 [ 208.262620][T13026] __free_pages+0xd8/0x390 [ 208.262628][T13026] __free_slab+0xcf/0x190 [ 208.262636][T13026] unfreeze_partials+0x150/0x180 [ 208.262645][T13026] put_cpu_partial+0xc1/0x180 [ 208.262652][T13026] __slab_free+0x2c9/0x3a0 [ 208.262662][T13026] ___cache_free+0x10e/0x130 [ 208.262670][T13026] qlink_free+0x50/0x90 [ 208.262679][T13026] qlist_free_all+0x5f/0xb0 [ 208.262689][T13026] kasan_quarantine_reduce+0x14a/0x160 [ 208.262698][T13026] __kasan_slab_alloc+0x2f/0xe0 [ 208.262708][T13026] slab_post_alloc_hook+0x5d/0x2f0 [ 208.262717][T13026] kmem_cache_alloc+0x15a/0x2d0 [ 208.262726][T13026] getname_flags+0xba/0x510 [ 208.262734][T13026] getname+0x19/0x20 [ 208.262743][T13026] do_sys_openat2+0xde/0x750 [ 208.262746][T13026] [ 208.262750][T13026] Memory state around the buggy address: [ 208.262758][T13026] ffff888112c82300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.262766][T13026] ffff888112c82380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.262774][T13026] >ffff888112c82400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.262779][T13026] ^ [ 208.262788][T13026] ffff888112c82480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.262796][T13026] ffff888112c82500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.262801][T13026] ================================================================== [ 208.262805][T13026] Disabling lock debugging due to kernel taint [ 209.037257][ T1175] device bridge_slave_1 left promiscuous mode May 18 03:33:26 [ 209.309210][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state syzkaller kern.a[ 209.318069][ T1175] device bridge_slave_0 left promiscuous mode lert kernel: [ 208.262422][T13026] page_owner tracks the page a[ 209.330079][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state s allocated May 18 03:33:26 syzkaller kern.alert kernel: [ 208.262443][T13026] page last allocated via order 3, migratetype Un[ 209.347582][ T1175] device veth1_macvtap left promiscuous mode movable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15, ts 22563625568, free_ts 22557481896 May 18 03:33:27 syzkaller kern.alert kernel: [ 208.262601][T13026] page last free stack trace: [ 209.555554][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 210.280922][ T1175] device veth0_to_bridge left promiscuous mode [ 210.287139][ T1175] bridge0: port 3(veth0_to_bridge) entered disabled state [ 210.295706][ T1175] device bridge_slave_1 left promiscuous mode [ 210.302229][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.310353][ T1175] device bridge_slave_0 left promiscuous mode [ 210.316825][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.327087][ T24] kauditd_printk_skb: 23580 callbacks suppressed [ 210.327097][ T24] audit: type=1400 audit(2000000008.241:53755): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.332189][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.333423][ T24] audit: type=1400 audit(2000000008.251:53756): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.354432][ T133] audit: audit_lost=1184 audit_rate_limit=0 audit_backlog_limit=64 [ 210.362146][ T24] audit: type=1400 audit(2000000008.251:53757): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.382212][ T133] audit: backlog limit exceeded [ 210.411126][ T1175] device bridge_slave_1 left promiscuous mode [ 210.416273][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 210.421805][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.428291][ T133] audit: audit_lost=1185 audit_rate_limit=0 audit_backlog_limit=64 [ 210.435972][ T24] audit: type=1400 audit(2000000008.251:53758): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 210.443776][ T133] audit: backlog limit exceeded [ 210.469264][ T1175] device bridge_slave_0 left promiscuous mode [ 210.475480][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.484213][ T1175] device bridge_slave_1 left promiscuous mode [ 210.490756][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.498569][ T1175] device bridge_slave_0 left promiscuous mode [ 210.505010][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.513655][ T1175] device veth1_macvtap left promiscuous mode [ 210.520129][ T1175] device veth0_vlan left promiscuous mode [ 210.526592][ T1175] device veth1_macvtap left promiscuous mode [ 210.533083][ T1175] device veth0_vlan left promiscuous mode [ 212.118846][ T1175] device bridge_slave_0 left promiscuous mode [ 212.124942][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.133010][ T1175] device veth1_macvtap left promiscuous mode [ 215.099343][ T24] kauditd_printk_skb: 68702 callbacks suppressed [ 215.099354][ T24] audit: type=1400 audit(2000000013.259:120649): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.112328][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.127056][ T24] audit: type=1400 audit(2000000013.259:120650): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.133475][ T133] audit: audit_lost=1790 audit_rate_limit=0 audit_backlog_limit=64 [ 215.154370][ T24] audit: type=1400 audit(2000000013.259:120651): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.162873][ T133] audit: backlog limit exceeded [ 215.183358][ T24] audit: type=1400 audit(2000000013.259:120652): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.189119][ T133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.209319][ T24] audit: type=1400 audit(2000000013.259:120653): avc: denied { read } for pid=133 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 215.216354][ T133] audit: audit_lost=1791 audit_rate_limit=0 audit_backlog_limit=64